medium6.1
CVE-2021-42567
Cross-site Scripting in Apereo CAS
Impact
Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apereo.cas:cas-server-core-web | < 6.4.2 | 6.4.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apereo | Central Authentication Service | from 6.3.0 before 6.3.7.1 from 6.4.0 before 6.4.2 |